Official text and translations
Treaty Office: English Second Additional Protocol
Treaty Office: French Second Additional Protocol
Treaty Office: Official and non-official languages
While cybercrime is proliferating and the complexity of obtaining electronic evidence that may be stored in foreign, multiple, shifting or unknown jurisdictions is increasing, the powers of law enforcement are limited by territorial boundaries. As a result, only a very small share of cybercrime that is reported to criminal justice authorities is leading to prosecutions or court decisions.
The Protocol responds to this challenge and provides tools for enhanced co-operation and disclosure of electronic evidence - such as direct cooperation with service providers and registrars, effective means to obtain subscriber information and traffic data, immediate co-operation in emergencies or joint investigations - that are subject to a system of human rights and rule of law, including data protection safeguards.
Tools of the Second Additional Protocol
- Direct requests to registrars in other jurisdictions to obtain domain name registration information
- Direct co-operation with service providers in other jurisdictions to obtain subscriber information
- More effective means to obtain subscriber information and traffic data through government-to-government co-operation
- Expeditious co-operation in emergency situations
- Joint investigation teams and joint investigations
- Video conferencing
- A strong system of human rights and rule of law safeguards, including for the protection of personal data
CyberSPEX: Workshop on facilitating co-operation under the Second Additional Protocol through the 24/7 Network established under the Budapest Convention in EU Member States
The implementation of the Second Additional Protocol (2AP) to the Convention on Cybercrime (Budapest Convention) was furthered through a workshop organised by the CyberSPEX project on 26 May 2026 in Bucharest, Romania. The event gathered EU m/s representatives from Ministries of Justice, law...
CyberSPEX and T-CY: Upcoming consultation with civil society stakeholders
The Cybercrime Convention Committee (T-CY) with the support of the CyberSPEX project, a joint project of the European Union and the Council of Europe, will host the third consultation with civil society stakeholders and service providers to strengthen public-private collaboration on cybercrime...
CyberSPEX: Meeting with Spanish authorities on the implementation of the Second Additional Protocol
The implementation of the Second Additional Protocol (2AP) to the Convention on Cybercrime (Budapest Convention) by the Spain was supported by the CyberSPEX project through a meeting organised in co-operation with the Ministry of the Presidency, Justice and Relations with the Parliament of...
Costa Rica becomes the fourth state to ratify the Second Additional Protocol to the Convention on Cybercrime
On 15 April 2026, Costa Rica ratified the Second Additional Protocol to the Convention on Cybercrime on enhanced co-operation and disclosure of electronic evidence (CETS No. 224). Costa Rica becomes the fourth country to ratify the Protocol, bringing it closer to its entry into force. Opened for...
CyberSPEX: Domestic meeting on the implementation of the Second Additional Protocol to the Convention on Cybercrime in Italy
The CyberSPEX project supported the Ministry of Justice of Italy in the organisation of a domestic meeting with national authorities and service providers on the implementation of the Second Additional Protocol (2AP) to the Convention on Cybercrime (Budapest Convention). The event took place in...
CyberSPEX: Roundtable on the implementation of the Second Additional Protocol to the Convention on Cybercrime in Romania
On 21 April 2026, on the margins of the 12th anniversary of the Cybercrime Programme Office (C-PROC) of the Council of Europe, a dedicated roundtable on the implementation of the Second Additional Protocol (2AP) to the Convention on Cybercrime (Budapest Convention) in Romania was organised,...
CyberSPEX: Hungary became the third state to ratify the Second Additional Protocol to the Convention on Cybercrime
On 5 February 2026, the Permanent Representation of Hungary transmitted the instrument of ratification for the Second Additional Protocol to the Convention on Cybercrime (CETS 224) to the Council of Europe and thus Hungary became the third country to ratify the Protocol. Opened for signature on...
CyberSPEX: Third Steering Committee meeting in support of the implementation of the Second Additional Protocol
The CyberSPEX project, a joint initiative of the European Union and the Council of Europe, held its Third Steering Committee meeting in Sarajevo, on 9 December 2025. The meeting was organised back-to-back with the Second Protocol Workshop for EU member states and South-East European countries and...
CyberSEE and CyberSPEX: International workshop on the implementation of the Second Additional Protocol to the Convention on Cybercrime (Budapest Convention)
The CyberSEE and CyberSPEX joint projects of the European Union and the Council of Europe teamed up and organised the International workshop on the implementation of the Second Additional Protocol (2AP) to the Convention on Cybercrime (Budapest Convention) on 10-11 December 2025, in Sarajevo,...
52
signatories in total*
4
countries have ratified the Protocol (out of the 52 signatories)*
15 April 2026
5 February 2026
14 November 2025
9 July 2025
Norway becomes the 51st State to sign the Second Additional Protocol
5 June 2025
Fiji signs the Second Additional Protocol (becoming the 50th State)
27 March 2025
Latvia becomes the 49th State to sign the Second Additional Protocol
12 December 2024
Peru becomes the 48th State to sign the Second Additional Protocol
24 September 2024
Paraguay becomes the 47th State to sign the Second Additional Protocol
20 June 2024
Czechia and Sierra Leone become the 45th and 46th States to sign the Second Additional Protocol
17 June 2024
Georgia becomes the 44th State to sign the Second Additional Protocol